That’s it. Would you recommended any other repository?
Anonero monero wallet: http://anonero5wmhraxqsvzq2ncgptq6gq45qoto6fnkfwughfl4gbt44swad.onion/fdroid/repo
Briar: https://briarproject.org/fdroid/repo
Cake Labs monero wallet: https://fdroid.cakelabs.com/?fingerprint=ea44efaee0b641ee7a032d397d5d976f9c4e5e1ed26e11c75702d064e55f8755
Collabora Office: https://www.collaboraoffice.com/downloads/fdroid/repo
Eternity for Lemmy: https://bazsalanszky.codeberg.page/fdroid/repo
IzzyOnDroid: https://apt.izzysoft.de/fdroid/repo
Molly: https://molly.im/fdroid/foss/fdroid/repo
Monerujo monero wallet: https://f-droid.monerujo.io/fdroid/repo
MySu Monero Wallet: http://rk63tc3isr7so7ubl6q7kdxzzws7a7t6s467lbtw2ru3cwy6zu6w4jad.onion/fdroid/repo?fingerprint=0C72C540E5841030FAE32329A1BC8747DCAC5236E4D1AAEDB67735CA7B7DD3D6
NewPipe: https://archive.newpipe.net/fdroid/repo
Session: https://fdroid.getsession.org/fdroid/repo
SimpleX Chat: https://app.simplex.chat/fdroid/repo?fingerprint=9F358FF284D1F71656A2BFAF0E005DEAE6AA14143720E089F11FF2DDCFEB01BA
For a crypto wallet it seems extremely dangerous to use a custom repo. What if one day it pushes an hacked version with the same signature and it takes all the money?
For this use case I’d consider only from fdroid, the only way it can be sure it matches the published source code
Those repos are maintained by the developers of the Monero wallet. So, if they were going to do that, they would also be able to push the malware version to the fdroid repo as well, because the signatures would match the developers.
The fdroid repository has only apps built by fdroid itself using the published source code, while a private repo could have a binary that doesn’t match the source.
It might be a financial incentive for someone to hack the dev, steal their signing keys, silently add a timebomb that at a specific time would send the whole content of the wallet to a specific monero address, replace the apk after a new release is added. Nobody would notice until too late
Difficult hack but not impossible
I keep it simple so I can confidently download the apps.
I can’t keep track of which repos are safe, and we’ve seen posts on here from people getting sketchy apps from a repo they added.
I’m sure there are other safe repos, and I’m willing to add one if people recommend an app that requires it, but I’ll probably remove it afterwards.
This is a good approach. I would not even use Izzy’s repo shown by OP (at least not on a daily driver device - great for testing newer apps I’m sure) because I don’t see it as advantageous to get updates so quickly or access to apps that are not yet (or will never be) fully open source.
Basically I see most of the value of F-Droid in their build server and official repo. So I only add repos with a very short list of apps, like microg and KDE.
I can always install the odd apk manually, or use Aurora store (preferably in the work profile)
Yeah. F-droid’s defaults for me have always worked well, and if I want a specific app to be up to date, I’ll download it right from the devs (Shattered Pixel)
But the IzzyOnDroid repo is getting the apps right from the devs too, no?
Idk. I’m not against izzy, just don’t want to have to check which repo an app is in browsing fdroid
https://www.collaboraoffice.com/downloads/fdroid/repo
Collabra office
https://archive.newpipe.net/fdroid/repo
Newpipe
I prefer Tubular to Newpipe. This version of newpipe has Sponsorblock.
I’m conflicted about sponsorblock, I usually hate youtuber sponsor (since those are usually scam) but I don’t know if there is a more ethical way to earn money from ads, since donations aren’t usually enough
At least they aren’t targered with my personal data.
I like Kde Itinerary for traveling so I add the Kde Android repo
There are general purpose repos and specific app repos. Those for specific apps might allow you to download apps not found elsewhere or they might just get you the update a little faster.
I have the repos for Collabora and Newpipe enabled on mine for those reasons.
You might also look at Obtanium if you’re looking to keep specific apps updated.
I installed droid-ify, an alternative front-end for F-Droid, it comes with a whole bunch of repo’s by default.
Is there a free FOSS version of it?
Yes, it’s called droid-ify. It’s on the official F-droid repo and is fully FOSS.
It is foss
Wow thanks for this post. Today I learned about Fdroid Repos. (Feeling sheepishly stupid but slight more informed now.)
I like to add as many repos as I can.
The more apps in F-Droid,
the less reason to go to GooglePlay :)Here is a list with all repo’s I’ve got imported:
- https://microg.org/fdroid/repo?fingerprint=9bd06727e62796c0130eb6dab39b73157451582cbd138e86c468acc395d14165
- https://microg.org/fdroid/archive?fingerprint=9bd06727e62796c0130eb6dab39b73157451582cbd138e86c468acc395d14165
- https://f-droid.org/archive?fingerprint=43238d512c1e5eb2d6569f4a3afbf5523418b82e0a3ed1552770abb9a9c9ccab
- https://f-droid.org/repo?fingerprint=43238d512c1e5eb2d6569f4a3afbf5523418b82e0a3ed1552770abb9a9c9ccab
- https://guardianproject.info/fdroid/archive?fingerprint=b7c2eefd8dac7806af67dfcd92eb18126bc08312a7f2d6f3862e46013c7a6135
- https://guardianproject.info/fdroid/repo?fingerprint=b7c2eefd8dac7806af67dfcd92eb18126bc08312a7f2d6f3862e46013c7a6135
- https://anonymousmessenger.ly/fdroid/repo?fingerprint=e065f74b35c920c7713012f45a0c8ad4758dd2776cff6214f7d8064b285c044b
- https://fdroid.beocode.eu/fdroid/repo?fingerprint=28360ddeba00922b156a9b03b5c96fea39d239f88f1fbfa5a8157291749aa05a
- https://mobileapp.bitwarden.com/fdroid/repo?fingerprint=bc54ea6fd1cd5175bcccc47c561c5726e1c3ed7e686b6db4b18bac843a3efe6c
- https://briarproject.org/fdroid/repo?fingerprint=1fb874bee7276d28ecb2c9b06e8a122ec4bcb4008161436ce474c257cbf49bd6
- https://fdroid.bromite.org/fdroid/repo?fingerprint=e1ee5cd076d7b0dc84cb2b45fb78b86df2eb39a3b6c56ba3dc292a5e0c3b9504
- https://www.collaboraoffice.com/downloads/fdroid/repo?fingerprint=573258c84e149b5f4d9299e7434b2b69a8410372921d4ae586ba91ec767892cc
- https://static.cryptomator.org/android/fdroid/repo?fingerprint=f7c3ec3b0d588d3cb52983e9eb1a7421c93d4339a286398e71d7b651e8d8ecdd
- https://divestos.org/apks/official/fdroid/repo?fingerprint=e4be8d6abfa4d9d4feef03cdda7ff62a73fd64b75566f6dd4e5e577550be8467
- https://fdroid.fedilab.app/repo?fingerprint=11f0a69910a4280e2cd3ccc3146337d006be539b18e1a9feace15ff757a94feb
- https://fdroid.frostnerd.com/fdroid/repo?fingerprint=74bb580f263ec89e15c207298dec861b5069517550fe0f1d852f16fa611d2d26
- https://gitjournal.io/fdroid/repo?fingerprint=e2ee4aa4380f0d3b3cf81eb17f5e48f827c3aa77122d9ad330cc441650894574
- https://apt.izzysoft.de/fdroid/repo?fingerprint=3bf0d6abfeae2f401707b6d966be743bf0eee49c2561b9ba39073711f628937a
- https://store.nethunter.com/repo?fingerprint=7e418d34c3ad4f3c37d7e6b0face13332364459c862134eb099a3bda2ccf4494
- https://cdn.kde.org/android/fdroid/repo?fingerprint=b3ebe10afa6c5c400379b34473e843d686c61ae6ad33f423c98af903f056523f
- https://cdn.kde.org/android/stable-releases/fdroid/repo/?fingerprint=13784ba6c80ff4e2181e55c56f961eed5844cea16870d3b38d58780b85e1158f
- https://fdroid.libretro.com/repo?fingerprint=3f05b24d497515f31feab421297c79b19552c5c81186b3750b7c131ef41d733d
- https://fdroid.libretro.com/archive?fingerprint=3f05b24d497515f31feab421297c79b19552c5c81186b3750b7c131ef41d733d
- https://molly.im/fdroid/foss/fdroid/repo?fingerprint=5198daef37fc23c14d5ee32305b2af45787bd7df2034de33ad302bdb3446df74
- https://f-droid.monerujo.io/fdroid/repo?fingerprint=a82c68e14af0aa6a2ec20e6b272eff25e5a038f3f65884316e0f5e0d91e7b713
- https://www.nanolx.org/fdroid/repo?fingerprint=862ed9f13a3981432bf86fe93d14596b381d75be83a1d616e2d44a12654ad015
- https://repo.netsyms.com/fdroid/repo?fingerprint=2581ba7b32d3ab443180c4087cab6a7e8fb258d3a6e98870ecb3c675e4d64489
- https://archive.newpipe.net/fdroid/repo?fingerprint=e2402c78f9b97c6c89e97db914a2751fda1d02fe2039cc0897a462bdb57e7501
- https://gitlab.com/TheCapsLock/fdroid-patched-apps/raw/master/fdroid/repo?fingerprint=313d9e6e789ff4e8e2d687aae31eef576050003ed67963301821ac6d3763e3ac
- https://fdroid.typeblog.net?fingerprint=1a7e446c491c80bc2f83844a26387887990f97f2f379ae7b109679feae3dbc8c
- https://fdroid.revolt.chat/repo/?fingerprint=0a9d2f61c8659801711e22177862f84c8134966f427973037a8fdfacff07c4f2
- https://fdroid.krombel.de/element-dev-fdroid/fdroid/repo?fingerprint=fd146ef30fa9f8f075bdcd9f02f069d22061b1df7cc90e90821750a7184bf53d
- https://fdroid.krombel.de/element-dev-gplay/fdroid/repo?fingerprint=5564ab4d4bf9461af7955449246f12d7e792a8d65165ebb2c0e90e65e77d5095
- https://fdroid.a3.pm/seabear/repo?fingerprint=9dc9cb5fdd85d37121a5fee99d24475f03fea7f2ec25fb94dd51866d87933ed1
- https://fdroid.getsession.org/fdroid/repo?fingerprint=db0e5297eb65cc22d6bd93c869943bdcfcb6a07dc69a48a0dd8c7ba698ec04e6
- https://app.simplex.chat/fdroid/repo?fingerprint=9f358ff284d1f71656a2bfaf0e005deae6aa14143720e089f11ff2ddcfeb01ba
- https://fdroid.stackwallet.com/fdroid/repo?fingerprint=764b4262f75750a5f620a205cee2886f18635fbda18df40758f5a1a45a950f84
- https://fdroid-repo.calyxinstitute.org/fdroid/repo?fingerprint=5da90117c91b0011ae44314ccc456cdfe406fbce3bf880072fd7c0b073e20df3
- https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fingerprint=c44d58b4547de5096138cb0b34a1cc99dab3b4274412ed753fccbfc11dc1b7b6
- https://releases.threema.ch/fdroid/repo?fingerprint=5734e753899b25775d90fe85362a49866e05ac4f83c05bef5a92880d2910639e
- https://fdroid.twinhelix.com/fdroid/repo?fingerprint=7b03b0232209b21b10a30a63897d3c6bca4f58fe29bc3477e8e3d8cf8e304028
- https://fdroid.secfirst.org/fdroid/repo?fingerprint=39eb57052f8d684514176819d1645f6a0a7bd943dbc31ab101949006ac0bc228
- https://www.droidware.info/fdroid/repo?fingerprint=2144449ab1dd270ec31b6087409b5d0ea39a75a9f290da62ac1b238a0eaaf851
- https://rfc2822.gitlab.io/fdroid-firefox/fdroid/?fingerprint=8f992bbba0340efe6299c7a410b36d9c8889114ca6c58013c3587cda411b4aed
- https://guardianproject-wind.s3.amazonaws.com/fdroid/repo?fingerprint=182cf464d219d340da443c62155198e399fec1bc4379309b775dd9fc97ed97e1
- https://repo.samourai.io/fdroid/repo/?fingerprint=5318afa280284855cf5d0027aa54517769f461d735980b1fb0854ceae8e072a5
- https://fdroid.cakelabs.com/?fingerprint=ea44efaee0b641ee7a032d397d5d976f9c4e5e1ed26e11c75702d064e55f8755
I usually keep the Archive variants disabled,
but they’re nice to keep around,
for if you ever need an old version of an app.Also,
most of these I’ve found through Droid-Ify,
it’s my favorite app to manage my F-Droid apps: https://f-droid.org/packages/com.looker.droidify/Bromite is unmaintained. Use Mulch instead. You can find it in DivestOS repos. Also there is another browser called Mull (firefox-based).
DivestOS Official: https://divestos.org/apks/official/fdroid/repo
DivestOS Official Archive: https://divestos.org/apks/official/fdroid/archive
Droid-ify has a lot more by default (but unticked). You can have a look and see what you could use. I use cromite and mulch as navigators, and you can find them there
I only add some app-specific repos to get more frequent updates on those. Newpipe and Fedilab in particular.
I know that I could use other tools to install directly from their release images but sticking with F-Droid for now for simplicity.I have active the DivestOS repo, since I use Mull as my main browser. It has also some other nice privacy focused apps.
I use mull too, so I’ll consider it Does fdroid delay the updates too much?
I don’t know how much the delay for Mull is specifically, but in general it falls in the range between one and two weeks.
And since Mull is already behind Firefox in terms of security updates, I think it’s better not to fall too much behind
I wouldn’t personally even use IzzyonDroid. The only other F-droid repo I use is cromite
Why not? Not reliable? Not safe? I’m re-learning (stuff got obsolete since last time I was interested)
Not OP but my answer to this is that I only add sources that I know I need to make sure I understand where everything comes from and to keep that attack surface lower.
Izzyondroid isn’t as strict when it comes to the software they package
Good to know. Added it because I read it had some extra apps. I’m trying new stuff
And that is a fair answer. My long term concern is that developers will start taking the easy route more and more instead of adhering to F-Droid’s fairly high standard.
Yep some of the big guys aldready do that they add available on fdroid and i get excited and click then it brings me to izzy and i get dissapointed.
What?
Like they advertise their app as being on fdroid but when you click the link its izzy
Futo repo for Futo Voice Input App. Totally free open-source offline speech to text engine. Works better than I expected (for English).